CVE-2018-5532

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.2.1 through 11.5.6 F5 BIG-IP versions 11.6.0 through 11.6.3.1 F5 BIG-IP versions 12.1.0 through 12.1.2 F5 BIG-IP version 13.0.0

Description The issue concerns the DNS Cache of TMM, where a cached domain name may still be resolved even after the parent server has revoked the record. This occurs when the DNS Cache receives a continuous stream of requests for the cached name.

Recommendations For F5 BIG-IP versions 11.2.1 through 11.5.6, consider clearing the DNS Cache of TMM to remove the revoked record. For F5 BIG-IP versions 11.6.0 through 11.6.3.1, consider clearing the DNS Cache of TMM to remove the revoked record. For F5 BIG-IP versions 12.1.0 through 12.1.2, consider clearing the DNS Cache of TMM to remove the revoked record. For F5 BIG-IP version 13.0.0, consider clearing the DNS Cache of TMM to remove the revoked record.